[OpenWrt Wiki] TP-Link Archer C5 AC1200 / TP-Link Archer C7 AC1750 / TP-Link TL-WDR7500

Dual Band (concurrent) and Gigabit Ethernet. Advertised as 1750 Mbps. It has simultaneous Triple-Stream (3×3) radios on both 2.4GHz and 5 GHz Bands. It supports 802.11n in 2.4GHz for 450Mbps throughput and IEEE 802.11ac (draft) for 1300Mbps throughput in 5GHz. Note: The editing history for this page is at Previous Archer C5/C7/WDR7500 page

While the Archer C7 has been a very popular router over the years, it comes from a day long before high-speed home connections.

MIPS-based devices in this class can't keep up with high-speed lines (> 300 mbps) and the features people now demand.

There are now multi-core, ARM-based devices in the same price class that far outperform the Archer C7

See Archer C7 NAT performance

The Archer C5 v1.x: available worldwide, has 3 internal (2.4GHz) and 3 external (5GHz) antennas.

The Archer C5 v2.0: available worldwide, has ?? internal (2.4GHz) and 2 external (5GHz) antennas.

The Archer C7: available worldwide, has 3 internal (2.4GHz) and 3 external (5GHz) antennas.

The Archer C7R (also called the TL-WDR7500): currently available in PRC only, has 6 external antennas.

WARNING: DO NOT install OpenWrt 17.03 or 18.06 on Archer C7 v1.x (and WDR7500 v2.x), the AR1A (v1) variant of QCA9880 wifi card causes a bootloop as the ath10k driver crashes hard when trying to initialize wifi hardware. Also, in older OpenWrt releases the 5GHz 802.11a/n/ac wifi does not work (due to issues with the same wifi card).

Version/Model	Release Date	last seen (Shop)	OpenWrt Version Supported	Model Specific Notes
Archer C5 v1.20	?		From 14.07 on	QCA9880-BR4A (v2). Same as C7 v2.0.
Archer C5 v2.x	?		Unsupported	2.x is based on Broadcom chips rather than Atheros and not supported yet (definitely no 802.11ac / 5 GHz)
Archer C7 v1.x	2013-01-15		From 14.07 on (2.4 GHz radio only)	QCA9880-AR1A (v1.x). Wikidevi. TP-Link product page.
Archer C7 v2.0	2013-12-17	2017-01	From 14.07 on	QCA9880-BR4A (v2). v2.0 printed on serial label on packaging. TP-Link support say “V2 has improved and DFS certified chipset. Flash capacity is 16 MB (v1: 8 MB). V2 also fixed some bugs on v1”. Forum. Photos. TP-Link stock firmware. Wikidevi.
Archer C7 v2.0	December 2015		From 15.05.1 on	In late 2015 the v2 changed to flash chip GD25Q128, affected serial numbers start with 215C or higher.
Archer C7 v3.0	??		Unsupported	QCA9563 + QCA9880, 16 MB flash
Archer C7 v4.0	??		From 18.06 on	mentioned in tp-link's downloads 2017-1
Archer C7 v5.0	??		From 18.06 on	mentioned in tp-link's diff from V4 is 1 USB port (instead of 2)
WDR7500 (Archer C7R) v2.0	2013-01-15		Custom build with target support patch 2.4GHz only	QCA9880-AR1A (v1). Seems PRC only. WiP. TP-Link product page. Wikidevi. AliExpress.
WDR7500 (Archer C7R) v3.0	2015-11-02		From 17.01 on	QCA9880-BR4A (v2). Seems PRC only. Photos.
WDR7500 (Archer C7R) v4.0	????-??-??		Unsupported	QCA9880-BR4A (v2). Manual available from TP-Link.
WDR7500 (Archer C7R) v5.0	2015-??-??		Unsupported	QCA9880-BR4A (v2). Manual available from TP-Link.

Please be aware that OpenWrt firmware does not support the hardware NAT capability of these routers. Hence, the throughput between WAN↔LAN will be slower than with stock firmware. This is only important for users with highspeed internet connections, e.g. a 1G fibre connection. If your internet connection is ⇐200-300 Mbps you don't need to worry about this. But if you need faster NAT throughput, consider buying faster hardware.

Archer C5 1.20

The WAN→LAN throughput with native firmware: 485-490Mbps and drops to 305-310Mbps with hardware NAT disabled. After an hour of stress testing there were no signs of thermal throttling.

The WAN←LAN or LAN↔LAN performance is not affected at 950Mbps.

Measurement details

Firmware: latest native, “150428”. Tool: iperf3 -l 1M in TCP mode, for WAN→LAN measurement -Reverse flag was used.

The thermal throttling could not be triggered even after covering the router with a blanket, case temperature: ~55-60°C.

Archer C7 2.0

The WAN↔LAN throughput with OpenWrt Chaos Calmer RC3 was measured to be substantially lower than that of the native firmware. (450 to 500Mbps with OpenWrt vs. 750 to 800Mbps with native firmware, both measured under conditions close to ideal). See this thread for details.

More recent testing on OpenWrt 19.07.7 suggests that the venerable Archer C7 (and other single-core, MIPS-based routers with ~720 MHz clock rates) are, under ideal conditions with no wireless or “unnecessary” services running, limited to about the following throughput:

Type	Average Bitrate per Second
------------------------------------------------------------------------	-------------------------------
Default routing (download)	325 Mbits
Default routing (upload)	310 Mbits
Software flow offloading (download)	843 Mbits
Software flow offloading (upload)	831 Mbits

Default routing + SQM [fq_codel + simple] (download)	245 Mbits
Default routing + SQM [fq_codel + simple] (upload)	150 Mbits
Software flow offloading + SQM [fq_codel + simple] (download)	268 Mbits
Software flow offloading + SQM [fq_codel + simple] (upload)	284 Mbits

Default routing + SQM [fq_codel + simplest_tbf] (download)	271 Mbits
Default routing + SQM [fq_codel + simplest_tbf] (upload)	188 Mbits
Software flow offloading + SQM [fq_codel + simplest_tbf] (download)	288 Mbits
Software flow offloading + SQM [fq_codel + simplest_tbf] (upload)	495 Mbits

Default routing + SQM [cake + piece_of_cake] (download)	244 Mbits
Default routing + SQM [cake + piece_of_cake] (upload)	167 Mbits
Software flow offloading + SQM [cake + piece_of_cake] (download)	266 Mbits
Software flow offloading + SQM [cake + piece_of_cake] (upload)	337 Mbits

Default routing + SQM [cake + layer_cake] (download)	246 Mbits
Default routing + SQM [cake + layer_cake] (upload)	146 Mbits
Software flow offloading + SQM [cake + layer_cake] (download)	266 Mbits
Software flow offloading + SQM [cake + layer_cake] (upload)	315 Mbits

Enabling wireless, running additional applications, or even imperfect ISP lines can significantly limit “real world” performance to well below these values.

SQM is commonly known as “bufferbloat management” or “QoS” and is often very valuable on consumer lines.

The SoC hardware used here and in other devices appears to only support USB 2.0 devices; the OHCI driver (USB 1.0/1.1) does not detect any applicable hardware. Use of older/slower USB devices such as keyboards, mice, and UPS may require a USB 2.0 hub as an intermediary. See OpenWrt Ticket #15194 and #16505 for further details.

→ Install OpenWrt (generic explanation)

Note: The Archer C7 V2.0's web interface does not accept the image .bin file unless you rename it to something with less dots; like openwrt.bin.

Download the correct version for your router from the tables below.
- Note that if your router says US, EU, or IL on the sticker on the bottom, you might need a different image than the image linked in the tables below. The images in the table below are for “rest of world” routers. If you browse to the parent directory of the linked images, you'll see the appropriate US, EU, or IL .bin file.
connect your PC to a LAN port of the TP-link. If the default configuration was not changed, the DHCP on the router will give you a 192.168.0.X address and the TP-link web administration page is http://192.168.0.1/. (User: admin, Password: admin) Under 'System Tools' select 'Firmware Upgrade'. Browse to the previously downloaded *.bin file. Click Upgrade.
- If the Webinterface tells you 'You have no authority to access this router!' that's because your browser does not send the correct HTTP referer header. Disable addons or use a different browser.
- If the web interface tells you 'Please choose a file to upgrade', just rename the file to something shorter like openwrt.bin.
Connect to http://192.168.1.1 with your web browser
Set your password and configure the router through the web UI. Basic Config
Congratulations! You just installed OpenWrt on your Router!

Note: Factory default IP address range is 192.168.0.1 while OpenWrt uses 192.168.1.1 by default. If you have trouble accessing your router after initial flash, check that you have a 192.168.1.x IP address on your PC.

Please add the installation procedure here.

All C7 Versions

OpenWrt firmware images have a name that is too long for the TP-Link web interface to handle. They need to be renamed to something short like factory.bin

Installation of TP-Link Archer C7 V1.X

The following images are known not to work and lead to a boot loop:

LEDE 17.01.X as documented in the forum and the bug tracker
OpenWrt 18.06.X as documented in the forum and the bug tracker

Last known good firmware images are Chaos Calmer 15.05.1.

Installation of TP-Link Archer C7 V2

(Updated and tested on March 2017 by orenr)

TP-Link are checking for the file signature in order to verify it. Once trying to flash OpenWrt you will encounter the following error:

Error code: 18005 
Upgrade unsuccessfully because the version of the upgraded file was incorrect. Please check the file name.

For TP-Link Archer C7 v2.0, it is enough just to rename the factory image to something like factory.bin, then just upload it via the OEM web interface like a firmware upgrade. Note that if your router says US, EU, or IL on the sticker on the bottom, you might need a different image than the image linked in the tables above. The images in the table above are for “rest of world” routers. If you browse to the parent directory of the linked images, you'll see the appropriate US, EU, or IL .bin file. (tested by tp-linked on May 2018)

For TP-Link Archer C7 v2.1 it is enough just to rename the factory image to something like factory.bin, then just upload it like a firmware upgrade.

Use the following workaround (based on https://www.gargoyle-router.com/phpbb/viewtopic.php?f=8&t=8210)

1.Download appropriate modified version of DDWRT that passes the TP-Link verification:

(Based on http://www.dd-wrt.com/phpBB2/viewtopic.php?p=998919&sid=9bd1c67b9e96384f914718a843aa2ea4)

The most recent version is available in the DDWRT download section: http://dd-wrt.com/site/support/other-downloads betas → 2017 → most recent version like “09-27-2017-r33413” → tplink_archer-c7-v2. In this directory, select the factory-to-ddwrt appropriate for your country. There are three different versions - US version, General international and an Israeli version. Download the version suitable for your device. Flash the DD-WRT firmware. Please note that TP-Link defaults to 192.168.0.1, but DD-WRT defaults to 192.168.1.1, so make sure to reconnect the Ethernet cable if your DHCP client cannot figure it out.

2.Flash TP-Link reverted FW:

Now you need to flash an older version of the vendor firmware, which doesn't check the file signatures.

Download ArcherC7v2_webrevert.rar from http://everbest.ftpserver.biz/TP-Link/DD-WRT_Revert%20Files/
Unpack the file using unrar.
Flash ArcherC7v2_webrevert.bin using DD-WRT web interface.

The router is back on 192.168.0.1 now.

3.Flash OpenWrt FW:

Download the firmware from the links in the tables above. Before flashing, rename the downloaded file to make it shorter and remove all dots except one, e.g. firmware.bin

Installation and upgrade of TP-Link Archer C7 V3

(Updated and tested install on February 2020 by zenith828)

I followed the instructions for installing Archer C7 V4 (see below) successfully.

I started with the most recent FW on the Archer C7 V3 SW version 3.14.3 (release date 2015-05-08) I upgraded to OpenWrt v19.07.1, but I used the binary named the Archer C7 v2, because that's what listed as the binary for the v3. This causes the Model to be listed as “TP-Link Archer C7 v2” on the status page. Hopefully this is the only issue.

I have not done extensive testing on it to ensure that all the functionality is working properly, but I have tested the wireless and everything seems to be in order.

Installation and upgrade of TP-Link Archer C7 V4

(Updated and tested install on June 2018 + upgrade 2019 by arberg)

Download current release (see table above or firmware downloads here)
Rename to for instance firmware.bin
Install OpenWrt by choosing Upgrade via Router Stock WebUi

I used newest TP-Link firmware when I did the update, in other words I had let TP Link update its original firmware first. This is probably not necessary. The 8 MB Archer C7 v2 file will not install on the C7 v4.

OpenWrt Upgrade
Luci > System > Backup/flash firmware > Flash new firmware image
Choose sysupgrade image, and choose the `openwrt-<version>-ar71xx-generic-archer-c7-v4-squashfs-sysupgrade.bin` file

Installation of TP-Link Archer C7 V5 via webUI

(Updated and tested on February 2019 by casta)

Download current release (see table above)
Rename to for instance firmware.bin
Upgrade via Router webui

I used an European original firmware (out of the box) when I did the update. WebUI install is working nicely.

User confirmations for webUI method

Date	User	Tested OpenWRT version	HW Version	Stock firmware
2019-02	casta		v5
2019-06-01	nuv	18.06.2 (openwrt-18.06.2-ar71xx-generic-archer-c7-v5-squashfs-factory.bin)	v5.0 (EU)	1.0.4 Build 20180425 rel.72768(4555)
2019-07-19	pkos98	18.06.4 (openwrt-18.06.4-ar71xx-generic-archer-c7-v5-squashfs-factory.bin)	v5.0 (EU)
2019-10-13	scolytus	18.06.4 (openwrt-18.06.4-ar71xx-generic-archer-c7-v5-squashfs-factory.bin)	v5.0 (EU)	1.0.4 Build 20180425 rel.72768(4555)

Installation of TP-Link Archer C7 V5 via TFTP

(Updated and tested on November 2018 by mac_low)

Download current release (see table above)
Rename to for instance ArcherC7v5_tp_recovery.bin
Set TFTP server under IP:192.168.0.66 with this ArcherC7v5_tp_recovery.bin on the root
Turn off the router
Press and hold Reset button
Turn on router with the reset button pressed and wait 5-10 seconds
Release the reset button and after a short time the firmware should be transferred from the tftp server
Wait ~30 second to complete recovery

I used European TP-Link original firmware when I did the update. Also look at this link for Archer c7 v5 (EU) if you have trouble TFTP-ing.

Installation of TP-Link WDR7500 V3 via TTL and TFTP

Download the corresponding OpenWrt Install (factory, not sysupgrade) image for your router, and rename it to something short like “firmware.bin”
Set your computer to the static IP address: 192.168.1.100
Start a TFTP server on your computer, and place firmware.bin in the root folder
Connect over TTL (speed=115200), and when you see the text “Autobooting in 1 seconds”, quickly type “tpl” to halt the boot process

You will now be greeted with a command prompt. Firstly we download the firmware over TFTP by issuing the following command:

tftpboot 0x80020000 firmware.bin

If everything goes well, you will see a message saying “Bytes transferred = 8126464 (7c0000 hex)”. Next we erase the flash. Please take care so that the power will not go out etc. You have been warned!

erase 0x9f020000 +0x7c0000

If everything goes well, you will see a message saying “Erased 124 sectors”. Finally we write the firmware to flash, by issuing the following command

cp.b 0x80020000 0x9f020000 0x7c0000

Wait a few minutes after the writing has finished, and power cycle the router. OpenWRT should now start up. Tested by Mats, 2021-01-17

When OpenWrt Designated Driver 50104 was installed, for example, no 5GHz network controller was detected (/etc/config/wireless did not contain the 5GHz radio controller).

To fix, install proper kernel module and firmware packages for your 5GHz WLAN hardware (see tech specs of your Archer model), e.g. for C5 v1 and some C7 versions you would use:

opkg update opkg install kmod-ath10k opkg install ath10k-firmware-qca988x rm /etc/config/wireless && wifi detect > /etc/config/wireless cat /etc/config/wireless reboot

On release 18.xx and later, wifi detect has been deprecated. Use wifi config instead - it will generate /etc/config/wireless for you.

Review Kernel log with dmesg. There can still be warnings like Direct firmware load for ath10k....bin failed, just make sure the device is properly detected in the end. Some firmwares reject to load unless you configure the wifi device country code to the value they suggest in the log (e.g. set option country 'US' in /etc/config/wireless).

Reference - Archer C7 missing ath10 firmware

To enter Failsafe-Mode press the WPS/Reset Button rapidly after starting the router. Stop when the second LED (from left) starts flashing very rapidly. Continue here and here when already logged in in failsafe mode.

If your timing is good, you can save your finger. On power-up, an Archer C7 v2 will do a “light test” and shortly thereafter the power (“sun”) light will go off. It will then start flashing several times per second, for a period of a couple seconds. If you're running a recent build of OpenWrt (tested in March 2018), during that window indicated by fast-flashing, a single click of the WPS/Reset button will get you into failsafe mode. Success in entering failsafe mode is indicated by the power light flashing even faster. If the power light goes to a slower flashing rate or steady on, the window to enter failsafe mode has closed.

If you have accidentally flashed your V1 or V1.1 before realizing that the 5GHz network card will not be supported, and want to return it to factory firmware, you can follow the following instructions (tested on V1.1, harvested from other tp-link device wikis)

The following instruction also works on V2

→ generic.uninstall

Warning!
This section describes actions that might damage your device or firmware. Proceed with care!

Obtain the factory firmware from the OEM: http://www.tplink.com/en/support/download/?model=Archer+C7

(tested on archer c5 v2) in case the file name of this firmware file does not contain the word “boot” in it, you can simply revert back to original firmware
in case the file name of this firmware file does contain the word “boot” in it, you need to cut off parts of the image file before flashing it:

An example of an image file with the word “boot” in it is ArcherC7v1_en_3_13_33_up_boot(130729).bin.

Cut the first 0x20200 (that is 131,584 = 257*512) Bytes from original firmware (1*512 Vendor-info + 256*512 U-Boot):

dd if=orig.bin of=tplink.bin skip=257 bs=512

You should transfer the firmeware image to the /tmp folder and revert back to original firmware (if available you can flash the firmware via the webinterface as well):

Via the safer method using sysupgrade:

sysupgrade /tmp/tplink.bin

Or alternatively you can use the mtd method:

mtd -r write /tmp/tplink.bin firmware

The serial-less TFTP recovery method for the TP-Link TL-WDR4300 also works for the Archer C7 (confirmed on v1.1 and v2) and the Archer C5 (v1.20).

For firmware revisions before 3.14.1 (140929), the router looks for an IP address of 192.168.1.66 and a file named ArcherC7v2_tp_recovery.bin. Firmware 3.14.1 updates the bootloader to look for an IP address of 192.168.0.66 and a file named ArcherC7v3_tp_recovery.bin even on hardware v2 units, but may also load ArcherC7v2_tp_recovery.bin. Some v1.1 units may also look for ArcherC7v1_tp_recovery.bin. The model Archer C5 looks for the file ArcherC5v1_tp_recovery.bin.

Setup your computer to 192.168.0.66 or 192.168.1.66 as appropriate for your version (SubnetMask /24 = 255.255.255.0) and connect it to LAN1. Start TFTP server (e.g. tftpd-hpa on debian) and provide recovery file with it. An Archer C7 will repeatedly try at 5-second intervals to connect to the TFTP server if you have the “wrong” address.

To activate TFTP Recovery press and hold WPS/Reset Button during powering on until WPS LED turns on.

For de-bricking with an OpenWrt image use the factory.bin image. In case you are flashing back original firmware, make sure original firmware image name does not contain word boot → return_to_factory_firmware.

Note: the TFTP flashing process requires that the product hardware id and version in the new image header match those in the existing image in flash, otherwise the new image is rejected, flashing is cancelled and the bootloader proceeds to boot the old image. When this happens, the following output is seen on the serial console:

 original_product_id = ffffffff
 original_product_ver = ffffffff
 recovery_product_id = c7000002
 recovery_product_ver = 01
 auto update firmware: product id verify fail!
Autobooting in 1 seconds

Bytes transferred = 16384512 (fa0200 hex)
 original_product_id = 00000000
 original_product_ver = 00
 original_resvered_id = 00
 original_special_id = 55530000
 recovery_product_id = c7000002
 recovery_product_ver = 01
 recovery_resvered_id = 01
 recovery_support_list = 00000000;55530000;
 compare special,ret:0
 auto update firmware: product id verify fail!

While this would be a fine safety feature in another context, it means the recovery process can reject a valid new image if the image in flash is corrupted. Unfortunately, such corruption can easily occur if the flashing process is interrupted: when an image is accepted, the flashing process first erases the whole space, which takes a while, and then writes the new image. If this process is interrupted during the erasure phase, the in flash header will appear as all 0xFF, and further recovery attempts will therefore fail because the header hardware id and version values will no longer match. If this happens, you'll need to try either a serial connection, or building an image with the header values overridden (in tp-link.mk set TPLINK_HWREV and TPLINK_HWID to 0xffffffff), or override the values corresponding to original_product_id,original_product_ver,original_resvered_id in the firmware image, which start at offset 0x40 in the firmware and stored as 4 byte int each (i.e. set 3*4=12 bytes to 0xFF starting at offset 0x40, if that does not work try setting to 0x00).

Update for debricking without serial on OpenWrt 19.07: After building your own image with the modified TPLINK_HWREV and TPLINK_HWID (you can also download mine here: https://github.com/danielschmalhofer/Important-Openwrt-Things/blob/master/archer_c7_ac1750_debricking.zip) you can flash with tftp the right image. You will see, if you hit the right one, when the blinking takes longer than normal. After that you will be able to access the router via terminal on root@192.168.1.1 - but take care, because for me the image was gone after a reboot. You will have to make a sysupgrade. But the sysupgrade via terminal will fail, because of the corrupting header-infos, and even -F will not help you. So install luci (opkg update && opkg install luci), login via http://192.168.1.1 and upgrade the system via the web interface - there the Force option works.

Connect to your router via serial (TX, RX and GND .. VCC not needed), power it up, then type “tpl” until the boot process is halted and you should be at the console. (Each “tpl” you type must be followed by carriage-return/linefeed. If you're running C-Kermit in an Emacs shell buffer under Linux, the carriage-return character is a control-M.)

If you're having problems getting 'tpl' to work, you may need a pull-up resistor inline on the TX side of the connection, see link. The TX pullup is most likely needed in version 2 models of revision B (serial beginning with 215B...), 16MB flash memory. A pull-up resistor also resolved “bleed through” of binary data into the console on an Archer C7 with a serial number beginning with 2154.

If you find three 220 Ohms resistors and one 150 Ohms resistor in your drawer they will do the trick when put in series. Additionally, if you are puzzled after reading the linked forum post above, this circuit may help (Vcc of the sketched FTDI was set to 3.3V):

                        R (~800 Ohms)             -------------
                     /---\/\/\/`------ VCC --RED--| USB FTDI  |
  -----------        |                            | 3.3V      |
  |Archer V2|-- RX --+----------------- TX --ORA--|           | --> to PC (minicom, screen, C-Kermit, ...)
  |serial   |-- TX -------------------- RX --YLW--|           |
  |         |-- GND ------------------ GND --BLK--|           |
  -----------                                     -------------

NOTE: If you are using a 3 pin cable containing an FTDI chip (such as the 3.5mm audio jack version), it is not possible to connect the resistor to VCC on the FTDI side. Instead, use the VCC on the Archer side, this is the normally unused pin next to GND on the 4 pin connection.

Set up a TFTP server with your firmware at 192.168.1.100, then run the following commands:

For 8MB Flash:

tftp 0x81000000 [name of your firmware file].bin
erase 0x9f020000 +7c0000
cp.b 0x81000000 0x9f020000 0x7c0000
reset

For 16MB Flash:

tftp 0x81000000 [name of your firmware file].bin
erase 0x9f020000 +f80000
cp.b 0x81000000 0x9f020000 0xf80000
reset

Version:	TL-WDR7500 v2.x (Archer C7R)	Archer C7 v1.x	Archer C7 v2.x / C5	TL-WDR7500 v4.x (Archer C7R)
Instruction set:	MIPS
Vendor:	Qualcomm Atheros
bootloader:	U-Boot (type tpl to enter U-Boot console on OEM firmware)
System-On-Chip:	QCA9558 (QCA9558-AT4A) 3×3 a/b/g/n (b/g/n, in this instance)
CPU/Speed:	MIPS74Kc@720 MHz
Flash Chip:	cFeon Q64-104HIP		Winbond W25Q128FV	Winbond W25Q64FV
Flash Specs:	8 MiB SPI		16 MiB SPI (14.3MHz)	8MiB SPI
RAM Chip:	Hynix H5PS5162GFR-Y5C x 2	Winbond W9751G6KB-25 x 2
RAM Specs:	128 MiB
Wireless No1:	Integrated: QCA9558 3×3 b/g/n
Wireless No2:	MiniPCIe: QCA9880-AR1A (v1) 3×3 a/n/ac PCIe radio		MiniPCIe: QCA9880-BR4A (v2) 3×3 a/n/ac PCIe radio	QCA9880-BR4A (v2) 3×3 a/n/ac
switch:	GbE AR8327N-AL1A		GbE AR8327N-BL1A
USB:	2 x USB 2.0
Power:	External 12V 2.5A			External 12V 2.0A
Serial:	Yes
JTAG:	Yes

Information about WDR-7500 Ver 6.0. China

Brand	Model	Versions	SoC	USB	Serial	JTag	Aditional WIFI Chip	Ethernet	RAM	Flash
TP-Link	WDR-7500	6.0 (CN)	QCA9563-AL3A	NO	Yes	?	QCA9880-BR4A	RTL8367S Gigabit Switch 1WAN + 4 LAN	W9751G6KB-25	25Q64CSIG (BH1621)

PCB http://oi66.tinypic.com/2uzsegy.jpg

QCA9563-AL3A MIPS CPU http://i66.tinypic.com/o70ft1.jpg

QCA9880-BR4A http://i65.tinypic.com/awt8hx.jpg

RTL8367S Gigabit Switch http://i67.tinypic.com/21eb5w6.jpg

One memory chip WinBond W9751G6KB-25 RAM http://i63.tinypic.com/wvqszb.jpg

Flash Chip 25Q64CSIG (BH1621) http://i65.tinypic.com/9asmqh.jpg

UART J1 http://i67.tinypic.com/s1tjlk.jpg

Here is Forum topic about it - https://forum.openwrt.org/viewtopic.php?pid=336271#p336271

8MB Flash Chip
`0x000000000000-0x000000020000`	“u-boot”
`0x000000020000-0x000000120000`	“kernel”
`0x000000120000-0x0000007e0000`	“rootfs”
`0x0000007e0000-0x0000007f0000`	“config”
`0x0000007f0000-0x000000800000`	“ART”

16MB Flash Chip (Archer C7 V2)
`0x000000000000-0x000000020000`	“u-boot”
`0x000000020000-0x000000120000`	“kernel”
`0x000000120000-0x000000fa0000`	“rootfs”
`0x000000fa0000-0x000000ff0000`	“config”
`0x000000ff0000-0x000001000000`	“ART”

I need to remove the Flashchip from the mainboard to connect it to a spi-programmer. I used flashrom (https://flashrom.org) to read out the flash chip. Dont forget to connect the /WP and /RESET Pin to VCC!
flashrom -p ft2232_spi:type=openmoko,divisor=2 -r flash-chip-backup.img
Read it two times with different divisors. Then compare both files with diff. The newest Version of flashrom supports both 16M flash chips.

Is some one have a solution to read it in place over jtag? The VCC connection seem to be direct to the power supply. The programmer need to powers all 3.3V components. But then the cpu could start working...

The included power supply is rated at 2.5A at 12V (30W), but the router does not draw anywhere near the 30 Watts deliverable by that supply. The extra capacity is useful for powering USB devices, however. The following are power measurements taken of an Archer C7 AC1750 V2.0 measuring current over the DC wires. The AC/DC adapter outputs 12.2V loaded. A Kill-A-Watt power meter was used to confirm the measurements and showed the AC/DC adapter was fairly efficient.

Stock firmware measurements
- booting draws between 2.4 and 3.5 W
- idle power 2.4 W
- downloading file over 2.4 GHz 3.6 W
- downloading over both 2.4 and 5 GHz 4.1 W
- flashing firmware 4.4 W
OpenWrt firmware
- idle power 2.2 to 2.4 W
- downloading via wifi at 12 Mbps through router instance of OpenVPN w/compression 3.1 W
- idle with all gigabit ports connected and both wlans enabled: 5.5 W

Archer C7 USB benchmark results

Using a Lexar L19 USB3.0 Stick (rated >40MB/s read/write). Encrypted transfers reduce performance heavily.

EXT2 USB → Router → SFTP → PC : 2.6MB/s
EXT2 USB → Router → SCP → PC : 3.6MB/s
EXT2 USB → Router → FTP (unencrypted) → PC : 14.9-15.5MB/s
Router /dev/zero → EXT2 USB : 10-19,42MB/s (depending on BS parameter of dd)

switch port map

Switch Ports:

0	eth1
1	WAN
2	LAN1
3	LAN2
4	LAN3
5	LAN4
6	eth0

Note: It seems that Archer C5 has a slightly different structure. Switch has 6 ports and the only interface eth0 connects to it carrying both VLAN1 and VLAN2. See page TP-Link Archer C5 v4. v2 is similar. So the overall full duplex WAN throughput cannot exceed 1 Gbps.

At least on a v2 device, there are only 128 VLAN “slots” available. If configuration of VLAN tags above 127 is required, the `vid` option will be required. See switch_configuration for further details.

Tagging "WAN" Interface for ISP Connectivity

Note that the WAN port is port #1 and connected to eth0.
To tag the WAN port create the VLAN ID under “Network ⇒ Switch” and assign it to “Port #1” and “Port #6”. Under “Network ⇒ Interface” edit the “WAN” interface and for its “Physical Settings” use eth0.<VLAN ID>
Example: VLAN ID 7 for German Telekom VDSL would be eth0.7

: Information on the pinout of JP4 would be helpful

Archer C5 v2

Configure your favorite terminal with the following settings: 115200 baud, 8 bit, no parity, 1 stop bit, no flow control.

WDR7500 v2 / Archer C7 v2

WDR7500 v3

Warning!
The labels in the image look wrong (confirmed with real hardware). It should be VCC, GND, RX, TX. The second pin has four connections to the surrounding mass, so is GND. The first pin has a capacitor, which points to the fact that it is VCC.

You can use an inexpensive PL2303 USB to UART adapter to connect to this router.

Note: The adapter linked is not officially compatible with Windows 8 and above. You will need an older driver (1.5) for it to work with newer versions of Windows. Be sure to disable automatic driver updates, or else Windows will use the newer, incompatible driver.

It is recommended that you solder a serial header for the most reliable connection, but in case you don't want to solder or you're just trying to quickly unbrick your router without making it obvious that you voided your warranty, male-to-male jumper wires will work.

Configure your favorite terminal with the following settings: 115200 baud, 8 bit, no parity, 1 stop bit, no flow control.

Archer C7 v4.0 (US)

I don't know what to really call this. I've been told on IRC that it is more like the WDR-7500. See the label pic and decide for yourself:

Here is a full board pic:

And zoomed in on the chips so they're readable:

In the lower right is the serial header. The first through hole is TX, second RX and third GROUND. There were two missing resistors at R27 and R24. I placed a 10K on R27 and a 1K on R24 (total shot in the dark based on some reading I had done, but it works). The RX through hole didn't seem to be connected to the right side of the R24 pad so it's got a solder bridge. Use 115200, 8N1, no flow control.

(FYI: from TP-Link engineering, R24 = 220R, R27 = 1K)

Archer C7 v5.0 (EU)

As I didn't have 0402 sized resistors at home, I've used just one 0603 of 180R value.

U-Boot 1.1.4 (Jan 26 2013 - 13:35:40) ap135 - Scorpion 1.0DRAM: sri Scorpion 1.0 ath_ddr_initial_config(178): (32bit) ddr2 init tap = 0x00000003 Tap (low, high) = (0x3, 0x1f) Tap values = (0x11, 0x11, 0x11, 0x11) 128 MB Flash Manuf Id 0x1c, DeviceId0 0x30, DeviceId1 0x17 flash size 8MB, sector count = 128 Flash: 8 MB Using default environment *** Warning *** : PCIe WLAN Module not found !!! In: serial Out: serial Err: serial Net: ath_gmac_enet_initialize... athrs_sgmii_res_cal: cal value = 0xe No valid address in Flash. Using fixed address No valid address in Flash. Using fixed address ath_gmac_enet_initialize: reset mask:c02200 Scorpion ----> S17 PHY * Vlan config... TEST: FINAL REG VAL after TX Calibration - 0x46000000 TEST: FINAL XMII VAL after RX Calibration - 0x56000000 TEST: FINAL ETH_CFG VAL after RX Calibration - 0x00028001 athrs17_reg_init: complete : cfg1 0x80000000 cfg2 0x7335 eth0: ba:be:fa:ce:08:41 eth0 up athrs17_reg_init_wan done SGMII in forced mode athr_gmac_sgmii_setup SGMII done : cfg1 0x800c0000 cfg2 0x7214 eth1: ba:be:fa:ce:08:41 eth1 up eth0, eth1 Setting 0x18116290 to 0x54a9214f Autobooting in 1 seconds ## Booting image at 9f020000 ... Uncompressing Kernel Image ... OK Starting kernel ... Booting QCA955x \00 Linux version 2.6.31--LSDK-9.2.0_U6.616 (root@localhost.localdomain) (gcc version 4.3.3 (GCC) ) #1 Sat Jan 26 13:40:17 CST 2013 Ram size passed from bootloader =128M flash_size passed from bootloader = 8 CPU revision is: 00019750 (MIPS 74Kc) cpu apb ddr apb ath_sys_frequency: cpu 720 ddr 600 ahb 200 Determined physical RAM map: memory: 08000000 @ 00000000 (usable) Zone PFN ranges: Normal 0x00000000 -> 0x00008000 Movable zone start PFN for each node early_node_map[1] active PFN ranges 0: 0x00000000 -> 0x00008000 Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32512 Kernel command line: console=ttyS0,115200 root=31:02 rootfstype=squashfs init=/sbin/init mtdparts=ath-nor0:128k(u-boot),1024k(kernel),6912k(rootfs),64k(config),64k(ART) mem=128M PID hash table entries: 512 (order: 9, 2048 bytes) Dentry cache hash table entries: 16384 (order: 4, 65536 bytes) Inode-cache hash table entries: 8192 (order: 3, 32768 bytes) Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes. Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes Writing ErrCtl register=00000000 Readback ErrCtl register=00000000 Memory: 112868k/131072k available (1889k kernel code, 18028k reserved, 435k data, 120k init, 0k highmem) NR_IRQS:128 plat_time_init: plat time init done Calibrating delay loop... 359.42 BogoMIPS (lpj=718848) Mount-cache hash table entries: 512 ****************ALLOC*********************** Packet mem: 802774e0 (0xe00000 bytes) ******************************************** NET: Registered protocol family 16 ath_pcibios_init: bus 0 ***** Warning PCIe 0 H/W not found !!! registering PCI controller with io_map_base unset ath_pcibios_init: bus 1 ath_pcibios_init(232): PCI 1 CMD write: 0x356 registering PCI controller with io_map_base unset Reset button pressed. bio: create slab <bio-0> at 0 pcibios_map_irq: IRQ 76 for bus 1 NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 4096 (order: 3, 32768 bytes) TCP bind hash table entries: 4096 (order: 2, 16384 bytes) TCP: Hash tables configured (established 4096 bind 4096) TCP reno registered NET: Registered protocol family 1 ATH GPIOC major 0 squashfs: version 4.0 (2009/01/31) Phillip Lougher msgmni has been set to 220 Block layer SCSI generic (bsg) driver version 0.4 loaded (major 254) io scheduler noop registered io scheduler deadline registered (default) Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled serial8250.0: ttyS0 at MMIO 0xb8020000 (irq = 19) is a 16550A console [ttyS0] enabled PPP generic driver version 2.4.2 NET: Registered protocol family 24 5 cmdlinepart partitions found on MTD device ath-nor0 Creating 5 MTD partitions on "ath-nor0": 0x000000000000-0x000000020000 : "u-boot" 0x000000020000-0x000000120000 : "kernel" 0x000000120000-0x0000007e0000 : "rootfs" 0x0000007e0000-0x0000007f0000 : "config" 0x0000007f0000-0x000000800000 : "ART" ->Oops: flash id 0x1c3017 . TCP cubic registered NET: Registered protocol family 10 NET: Registered protocol family 17 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> athwdt_init: Registering WDT success ath_otp_init: Registering OTP success VFS: Mounted root (squashfs filesystem) readonly on device 31:2. Freeing unused kernel memory: 120k freed init started: BusyBox v1.01 (2012.11.27-00:48+0000) multi-call binary This Board use 2.6.31 xt_time: kernel timezone is -0000 nf_conntrack version 0.5.0 (2048 buckets, 8192 max) CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use nf_conntrack.acct=1 kernel parameter, acct=1 nf_conntrack module option or sysctl net.netfilter.nf_conntrack_acct=1 to enable it. ip_tables: (C) 2000-2006 Netfilter Core Team insmod: cannot open module `/lib/modules/2.6.31/kernel/iptable_raw.ko': No such file or directory insmod: cannot open module `/lib/modules/2.6.31/kernel/flashid.ko': No such file or directory PPPoL2TP kernel driver, V1.0 PPTP driver version 0.8.3 insmod: cannot open module `/lib/modules/2.6.31/kernel/harmony.ko': No such file or directory (none) mips #1 Sat Jan 26 13:40:17 CST 2013 (none) (none) login: qca955x_GMAC: Length per segment 1536 955x_GMAC: qca955x_gmac_attach 955x_GMAC: qca955x_set_gmac_caps Currently in polling mode unit1 mac:1 Registering S17.... qca955x_GMAC: RX TASKLET - Pkts per Intr:200 qca955x_GMAC: Max segments per packet : 1 qca955x_GMAC: Max tx descriptor count : 220 qca955x_GMAC: Max rx descriptor count : 220 qca955x_GMAC: Mac capability flags : 12002200 955x_GMAC: qca955x_gmac_attach 955x_GMAC: qca955x_set_gmac_caps Currently in polling mode unit0 mac:0 Registering S17.... qca955x_GMAC: RX TASKLET - Pkts per Intr:200 qca955x_GMAC: Max segments per packet : 1 qca955x_GMAC: Max tx descriptor count : 220 qca955x_GMAC: Max rx descriptor count : 220 qca955x_GMAC: Mac capability flags : 10002A00 955x_GMAC: Serdes PLL is locked value 0x1f038116 athr_gmac_ring_alloc Allocated 3520 at 0x87950000 athr_gmac_ring_alloc Allocated 3520 at 0x87a8e000 955x_GMAC: eth1 in SGMII MODE Scorpion -----> S17 PHY ACL is not yet enabled. Enabling... Hello, nat helper module for 1.08! netlink_kernel_create succeeded at tp_rule_nl_prot: [29] ######## S17 SSDK init succeeded! ######## _athrs17_mac0_intf SGMII done athrs17_reg_init:done 955x_SGMII::athr_gmac_sgmii_setup Done Setting Drop CRC Errors, Pause Frames and Length Error frames Setting PHY... Phy setup Complete ADDRCONF(NETDEV_UP): eth0: link is not ready device eth0.1 entered promiscuous mode device eth0 entered promiscuous mode SET INTF MAC 0:1c-fa-68-fe-32-f4 SET INTF MAC 1:1c-fa-68-fe-32-f5 br0: port 1(eth0.1) entering forwarding state nf_conntrack_rtsp v0.6.21 loading nf_nat_rtsp v0.6.21 loading adf: module license 'Proprietary' taints kernel. Disabling lock debugging due to kernel taint ath_hal: 0.9.17.1 (AR5416, AR9380, REGOPS_FUNC, WRITE_EEPROM, 11D) ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved ath_dfs: Version 2.0.0 Copyright (c) 2005-2006 Atheros Communications, Inc. All Rights Reserved ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved ath_ahb: 10.0.107 (Atheros/multi-bss) check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. Enterprise mode: 0x43fc0000 Restoring Cal data from Flash check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. ath_get_caps[5863] rx chainmask mismatch actual 7 sc_chainmak 0 ath_get_caps[5838] tx chainmask mismatch actual 7 sc_chainmak 0 check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. SC Callback Registration for wifi0 wifi0: Atheros ???: mem=0xb8100000, irq=2 ath_pci: 10.0.107 (Atheros/multi-bss) ath_pci_probe ath_pci 0000:01:00.0: ath DEBUG: sc=0x87aa7ce0 ol_ath_pci_configure : num_desired MSI set to 0 Using PCI Legacy Interrupt __ol_ath_attach: ath_attach TODO ol_ath_attach() BMI inited. ol_ath_attach() BMI Get Target Info. ol_ath_attach() TARGET TYPE: 7 Vers 0x4000002c NUM_DEV=1 FWMODE=0x2 FWSUBMODE=0x0 FWBR_BUF 0 ol_ath_attach() configure Target . ol_transfer_bin_file: flash cal data len 65535 doesn't equal to 2116 ol_transfer_bin_file: Board data file AR9888v1 ol_transfer_bin_file 1535: Download Board data len 2116 ol_ath_download_firmware: Using 0x1234 for the remainder of init ol_transfer_bin_file 1527: Download OTP data len 3572 ol_transfer_bin_file 1553: Download Firmware data len 183920 ol_ath_attach() Download FW. ol_ath_attach() HT Create . ol_ath_attach() HIF Claim. ol_ath_attach() BMI Done. ol_ath_attach() WMI attached. wmi_handle 86ce0000 +HWT -HWT HTC Service:0x0300 ep:1 TX flow control disabled TXRX: Created pdev 86df3a00 wmi_service_ready_event_rx: WMI UNIFIED SERVICE READY event num_rf_chain : 00000003 ht_cap_info: : 0000085b vht_cap_info : 338001b2 vht_supp_mcs : 0000ffea wmi_ready_event_rx: WMI UNIFIED READY event ol_ath_connect_htc() WMI is ready ol_ath_set_host_app_area TODO ol_ath_attach() connect HTC. target uses HTT version 2.0; host uses 2.0 ol_regdmn_start: reg-domain param: regdmn=0, countryName=, wModeSelect=FFFFFFFF, netBand=FFFFFFFF, extendedChanMode=0. ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2) flags 0x2150 ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4) flags 0xa0 ol_regdmn_init_channels: !avail mode 0x1f9001 (0x8) flags 0xc0 ol_regdmn_init_channels: !avail mode 0x1f9001 (0x20) flags 0xd0 ol_regdmn_init_channels: !avail mode 0x1f9001 (0x40) flags 0x150 ol_regdmn_init_channels: !avail mode 0x1f9001 (0x800) flags 0x10080 ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2000) flags 0x20080 ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4000) flags 0x40080 ol_ath_phyerr_attach: called OL Resmgr Init-ed ol_if_dfs_setup: called ol_if_dfs_attach: called; ptr=87af3974, radar_info=87addb98 ol_ath_rtt_meas_report_attach: called ol_ath_attach() UMAC attach . __ol_ath_attach: init tx/rx TODO __ol_ath_attach: hard_header_len reservation 58 __ol_ath_attach: dev name wifi1 SC Callback Registration for wifi1 check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. VAP device ath0 created DES SSID SET=<redacted> ieee80211_ioctl_siwmode: imr.ifm_active=131712, new mode=3, valid=1 check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. Invoking ACS module for Best channel selection check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. Channel 1 average beacon RSSI 25 noisefloor -107 ieee80211_acs_find_best_11ng_centerchan chan: 1 beacon RSSI + weighted noisefloor: -189 Channel 6 average beacon RSSI 8 noisefloor -107 ieee80211_acs_find_best_11ng_centerchan chan: 6 beacon RSSI + weighted noisefloor: -206 Channel 6 average beacon RSSI 8 noisefloor -107 ieee80211_acs_find_best_11ng_centerchan chan: 6 beacon RSSI + weighted noisefloor: -206 Channel 11 average beacon RSSI 9 noisefloor -107 ieee80211_acs_find_best_11ng_centerchan chan: 11 beacon RSSI + weighted noisefloor: -205 ieee80211_acs_find_best_11ng_centerchan found best 11ng center chan: 6 rssi: -206 check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. ieee80211_dfs_cac_start[267] ===NON DFS chan === 2437 check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. ieee80211_dfs_cac_start[267] ===NON DFS chan === 2437 check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. athr_gmac_ring_alloc Allocated 3520 at 0x86dfd000 athr_gmac_ring_alloc Allocated 3520 at 0x87ae4000 955x_GMAC: eth0 in RGMII MODE Scorpion -----> S17 PHY athrs17_reg_init_wan done Setting Drop CRC Errors, Pause Frames and Length Error frames Setting PHY... ADDRCONF(NETDEV_UP): eth1: link is not ready device eth1 entered promiscuous mode check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. ieee80211_dfs_cac_start[267] ===NON DFS chan === 2437 device ath0 entered promiscuous mode br1: port 2(ath0) entering forwarding state ieee80211_ioctl_siwmode: imr.ifm_active=918144, new mode=3, valid=1 check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. br1: port 2(ath0) entering disabled state DEVICE IS DOWN ifname=ath0 DEVICE IS DOWN ifname=ath0 check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. ieee80211_dfs_cac_start[267] ===NON DFS chan === 2437 br1: port 2(ath0) entering forwarding state check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. br1: port 2(ath0) entering disabled state br1: starting userspace STP failed, starting kernel STP check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. check DDR Activity - HIGH ar9300_set_reset: Scorpion SoC RTC reset done. ieee80211_dfs_cac_start[267] ===NON DFS chan === 2437 br1: topology change detected, propagating br1: port 2(ath0) entering forwarding state isCountryCodeValid: EEPROM regdomain 0x52 ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2) flags 0x2150 ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4) flags 0xa0 ol_regdmn_init_channels: !avail mode 0x1f9001 (0x8) flags 0xc0 ol_regdmn_init_channels: !avail mode 0x1f9001 (0x20) flags 0xd0 ol_regdmn_init_channels: !avail mode 0x1f9001 (0x40) flags 0x150 ol_regdmn_init_channels: !avail mode 0x1f9001 (0x800) flags 0x10080 ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2000) flags 0x20080 ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4000) flags 0x40080 ath_ioctl: SIOC80211IFCREATE CALLED wmi_unified_vdev_create_send: ID = 0 VAP Addr = 1c:fa:68:fe:32:f2: TXRX: Created vdev 86f6ee00 (1c:fa:68:fe:32:f2) VAP device ath1 created TXRX: ol_txrx_peer_find_add_id: peer 86f60400 ID 129 TXRX: ol_txrx_peer_find_add_id: peer 86f60400 ID 145 Setting vdev param = f, value = 1 ol_ath_vap_set_param: VAP param unsupported param:80 value:1 ol_ath_vap_set_param: VAP param unsupported param:35 value:0 DES SSID SET=<redacted> ieee80211_ioctl_siwmode: imr.ifm_active=66176, new mode=3, valid=1 OL vap_stop + wmi_unified_vdev_stop_send OL vap_stop - STOPPED EVENT for vap 0 Setting vdev param = 1a, value = 1 Setting vdev param = 3, value = 100 Setting vdev param = d, value = 1 Setting vdev param = 12, value = 1 Setting vdev param = 1e, value = 1 OL vap_stop + wmi_unified_vdev_stop_send OL vap_stop - STOPPED EVENT for vap 0 OL vap_start + OL vap_start - ol_vdev_start_resp_ev ol_ath_vap_join: join operation is only for STA/IBSS mode set channel freq 5745 WMI channel freq=5745, mode=a band_center_freq1=5775 ol_if_dfs_configure: called ol_if_dfs_disable: called ol_ath_wmm_update: ieee80211_dfs_cac_start[267] ===NON DFS chan === 5745 Setting vdev param = 3, value = 100 Notification to UMAC VAP layer FIRMWARE:75 C ,5401 M 1f 5775 2f 9744 408 device ath1 entered promiscuous mode br1: topology change detected, propagating br1: port 3(ath1) entering forwarding state ieee80211_ioctl_siwmode: imr.ifm_active=131738, new mode=3, valid=1 wmi_unified_vdev_stop_send STOPPED EVENT for vap 0 br1: port 3(ath1) entering disabled state ol_ath_vap_set_param: VAP param unsupported param:32 value:0 ol_ath_vap_set_param: VAP param unsupported param:121 value:1 DEVICE IS DOWN ifname=ath1 DEVICE IS DOWN ifname=ath1 ol_ath_vap_set_param: VAP param unsupported param:32 value:0 ol_ath_vap_set_param: VAP param unsupported param:32 value:0 ol_ath_vap_set_param: VAP param unsupported param:32 value:1 ol_ath_vap_set_param: VAP param unsupported param:74 value:1 Group Keyidx set=1 wmi_unified_vdev_install_key_send Setting Key for Macaddress:0xf232fe68fa1c Keyix=1 Keylen=16 Keyflags=1 Cipher=4 Keydata=0x71 0xdd 0x9c 0x85 0x11 0x96 0x2a 0xd5 0x2d 0x82 0xfa 0xac 0x1a 0x96 0xa7 0x3d ol_ath_vap_set_param: VAP param unsupported param:74 value:0 TXRX: ol_txrx_peer_find_add_id: peer 86f60400 ID 114 TXRX: sec spec for peer 86f60400 (1c:fa:68:fe:32:f2): mcast key of type 6 Setting vdev param = 1f, value = 1 OL vap_stop + wmi_unified_vdev_stop_send OL vap_stop - STOPPED EVENT for vap 0 OL vap_start + OL vap_start - ol_vdev_start_resp_ev ol_ath_vap_join: join operation is only for STA/IBSS mode set channel freq 5745 WMI channel freq=5745, mode=a band_center_freq1=5775 ol_if_dfs_configure: called ol_if_dfs_disable: called ol_ath_wmm_update: ieee80211_dfs_cac_start[267] ===NON DFS chan === 5745 Setting vdev param = 3, value = 100 Notification to UMAC VAP layer FIRMWARE:75 C ,5401 M 1f 5775 2f 8624 238 br1: topology change detected, propagating br1: port 3(ath1) entering forwarding state FWLOG: [32170] WAL_DBGID_SECURITY_ENCR_EN ( ) FWLOG: [32170] WAL_DBGID_SECURITY_MCAST_KEY_SET ( 0x1 ) wmi_unified_vdev_stop_send STOPPED EVENT for vap 0 br1: port 3(ath1) entering disabled state OL vap_stop + wmi_unified_vdev_stop_send OL vap_stop - STOPPED EVENT for vap 0 OL vap_start + OL vap_start - ol_vdev_start_resp_ev ol_ath_vap_join: join operation is only for STA/IBSS mode set channel freq 5745 WMI channel freq=5745, mode=a band_center_freq1=5775 ol_if_dfs_configure: called ol_if_dfs_disable: called ol_ath_wmm_update: ieee80211_dfs_cac_start[267] ===NON DFS chan === 5745 Setting vdev param = 3, value = 100 Notification to UMAC VAP layer FIRMWARE:75 C ,5401 M 1f 5775 2f 8624 238 br1: topology change detected, propagating br1: port 3(ath1) entering forwarding state fuse init (API version 7.12) usbcore: registered new interface driver usbfs usbcore: registered new interface driver hub usbcore: registered new device driver usb ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver Port Status 1c000004 ath-ehci ath-ehci.0: ATH EHCI ath-ehci ath-ehci.0: new USB bus registered, assigned bus number 1 ehci_reset Intialize USB CONTROLLER in host mode: 13 ehci_reset Port Status 1c000000 ath-ehci ath-ehci.0: irq 3, io mem 0x1b000000 ehci_reset Intialize USB CONTROLLER in host mode: 13 ehci_reset Port Status 1c000000 ath-ehci ath-ehci.0: USB 2.0 started, EHCI 1.00 usb usb1: configuration #1 chosen from 1 choice hub 1-0:1.0: USB hub found hub 1-0:1.0: 1 port detected Port Status 1c000000 ath-ehci1 ath-ehci1.1: ATH EHCI ath-ehci1 ath-ehci1.1: new USB bus registered, assigned bus number 2 ehci_reset Intialize USB CONTROLLER in host mode: 13 ehci_reset Port Status 1c000000 ath-ehci1 ath-ehci1.1: irq 3, io mem 0x1b400000 ehci_reset Intialize USB CONTROLLER in host mode: 13 ehci_reset Port Status 1c000000 ath-ehci1 ath-ehci1.1: USB 2.0 started, EHCI 1.00 usb usb2: configuration #1 chosen from 1 choice hub 2-0:1.0: USB hub found hub 2-0:1.0: 1 port detected SCSI subsystem initialized Initializing USB Mass Storage driver... usbcore: registered new interface driver usb-storage USB Mass Storage support registered. GPL NetUSB up! kc 86 : run_telnetDBGDServer start kc 223 : init_DebugD end INFO1758: NetUSB 1.184, 0002061F : May 7 2012 10:35:23 INFO175A: AUTH ISOC INFO175B: usbcore: registered new interface driver KC NetUSB General Driver INFO0076: init proc : PAGE_SIZE 4096 INFO17B4: Check mac address INFO162C: infomap 8668c220 INFO162F: sleep to wait br0 to wake up INFO02D0: use dev Name br0 INFO1638: sleep to wait br0 end. INFO1651: UDP_BROAD 7437 tcpPort:625868800 INFO02D0: use dev Name br0 INFO1538: tcpConnector() started... 955x_GMAC: qca955x_soc_gmac_set_mac_duplex 955x_GMAC: qca955x_soc_gmac_set_link Done ADDRCONF(NETDEV_CHANGE): eth1: link becomes ready br1: topology change detected, propagating br1: port 1(eth1) entering forwarding state Enet:1 port1 up 955x_GMAC: enet unit:1 is up... eth1 SGMII 1000Mbps full duplex 955x_GMAC: qca955x_soc_gmac_set_mac_duplex 955x_GMAC: qca955x_soc_gmac_set_link Done 955x_GMAC: done cfg2 0x7215 ifctl 0x0 miictrl ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready INFO1415: Bind to br0

U-Boot 1.1.4 (Apr 23 2015 - 13:39:44) ap135 - Scorpion 1.0DRAM: sri Scorpion 1.0 ath_ddr_initial_config(178): (32bit) ddr2 init tap = 0x00000003 Tap (low, high) = (0x2, 0x1b) Tap values = (0xe, 0xe, 0xe, 0xe) 128 MB Flash Manuf Id 0xef, DeviceId0 0x40, DeviceId1 0x17 flash size 8MB, sector count = 128 Flash: 8 MB Using default environment *** Warning *** : PCIe WLAN Module not found !!! In: serial Out: serial Err: serial Net: ath_gmac_enet_initialize... athrs_sgmii_res_cal: cal value = 0xe No valid address in Flash. Using fixed address No valid address in Flash. Using fixed address ath_gmac_enet_initialize: reset mask:c02200 Scorpion ----> S17 PHY * athrs17_reg_init: complete : cfg1 0x80000000 cfg2 0x7114 eth0: ba:be:fa:ce:08:41 eth0 up athrs17_reg_init_wan done SGMII in forced mode athr_gmac_sgmii_setup SGMII done : cfg1 0x800c0000 cfg2 0x7214 eth1: ba:be:fa:ce:08:41 eth1 up eth0, eth1 Setting 0x18116290 to 0x50a1214f Autobooting in 1 seconds ## Booting image at 9f020000 ... Uncompressing Kernel Image ... OK Starting kernel ... Booting QCA955x Linux version 2.6.31--LSDK-9.2.0_U6.616 (tplink@localhost.localdomain) (gcc version 4.3.3 (GCC) ) #1 Thu Apr 23 13:43:15 CST 2015 Ram size passed from bootloader =128M flash_size passed from bootloader = 8 CPU revision is: 00019750 (MIPS 74Kc) cpu apb ddr apb ath_sys_frequency: cpu 720 ddr 600 ahb 200 Determined physical RAM map: memory: 08000000 @ 00000000 (usable) Zone PFN ranges: Normal 0x00000000 -> 0x00008000 Movable zone start PFN for each node early_node_map[1] active PFN ranges 0: 0x00000000 -> 0x00008000 Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32512 Kernel command line: console=ttyS0,115200 root=31:02 rootfstype=squashfs init=/sbin/init mtdparts=ath-nor0:128k(u-boot),1024k(kernel),6912k(rootfs),64k(config),64k(ART) mem=128M PID hash table entries: 512 (order: 9, 2048 bytes) Dentry cache hash table entries: 16384 (order: 4, 65536 bytes) Inode-cache hash table entries: 8192 (order: 3, 32768 bytes) Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes. Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes Writing ErrCtl register=00000000 Readback ErrCtl register=00000000 Memory: 112868k/131072k available (1891k kernel code, 18036k reserved, 441k data, 120k init, 0k highmem) NR_IRQS:128 plat_time_init: plat time init done Calibrating delay loop... 359.42 BogoMIPS (lpj=718848) Mount-cache hash table entries: 512 ****************ALLOC*********************** Packet mem: 802794e0 (0xe00000 bytes) ******************************************** NET: Registered protocol family 16 ath_pcibios_init: bus 0 ***** Warning PCIe 0 H/W not found !!! registering PCI controller with io_map_base unset ath_pcibios_init: bus 1 ath_pcibios_init(232): PCI 1 CMD write: 0x356 registering PCI controller with io_map_base unset ===@@@@@@@@@@@=>use GPIO13 as wifi button control! bio: create slab <bio-0> at 0 pcibios_map_irq: IRQ 76 for bus 1 NET: Registered protocol family 2 IP route cache hash table entries: 1024 (order: 0, 4096 bytes) TCP established hash table entries: 4096 (order: 3, 32768 bytes) TCP bind hash table entries: 4096 (order: 2, 16384 bytes) TCP: Hash tables configured (established 4096 bind 4096) TCP reno registered NET: Registered protocol family 1 ATH GPIOC major 0 squashfs: version 4.0 (2009/01/31) Phillip Lougher msgmni has been set to 220 Block layer SCSI generic (bsg) driver version 0.4 loaded (major 254) io scheduler noop registered io scheduler deadline registered (default) Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled serial8250.0: ttyS0 at MMIO 0xb8020000 (irq = 19) is a 16550A console [ttyS0] enabled PPP generic driver version 2.4.2 NET: Registered protocol family 24 5 cmdlinepart partitions found on MTD device ath-nor0 Creating 5 MTD partitions on "ath-nor0": 0x000000000000-0x000000020000 : "u-boot" 0x000000020000-0x000000120000 : "kernel" 0x000000120000-0x0000007e0000 : "rootfs" 0x0000007e0000-0x0000007f0000 : "config" 0x0000007f0000-0x000000800000 : "ART" ->Oops: flash id 0xef4017 . Ooops, why the devices couldn't been initialed? TCP cubic registered NET: Registered protocol family 10 NET: Registered protocol family 17 802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com> All bugs added by David S. Miller <davem@redhat.com> athwdt_init: Registering WDT success ath_otp_init: Registering OTP success VFS: Mounted root (squashfs filesystem) readonly on device 31:2. Freeing unused kernel memory: 120k freed init started: BusyBox v1.01 (2015.04.23-05:49+0000) multi-call binary This Board use 2.6.31 xt_time: kernel timezone is -0000 nf_conntrack version 0.5.0 (2048 buckets, 81920 max) CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use nf_conntrack.acct=1 kernel parameter, acct=1 nf_conntrack module option or sysctl net.netfilter.nf_conntrack_acct=1 to enable it. ip_tables: (C) 2000-2006 Netfilter Core Team insmod: cannot open module `/lib/modules/2.6.31/kernel/iptable_raw.ko': No such file or directory insmod: cannot open module `/lib/modules/2.6.31/kernel/flashid.ko': No such file or directory PPPoL2TP kernel driver, V1.0 PPTP driver version 0.8.3 insmod: cannot open module `/lib/modules/2.6.31/kernel/harmony.ko': No such file or directory (none) mips #1 Thu Apr 23 13:43:15 CST 2015 (none) (none) login: qca955x_GMAC: Length per segment 1536 955x_GMAC: qca955x_gmac_attach 955x_GMAC: qca955x_set_gmac_caps Currently in polling mode unit1 mac:1 Registering S17.... qca955x_GMAC: RX TASKLET - Pkts per Intr:200 qca955x_GMAC: Max segments per packet : 1 qca955x_GMAC: Max tx descriptor count : 220 qca955x_GMAC: Max rx descriptor count : 220 qca955x_GMAC: Mac capability flags : 12002200 955x_GMAC: qca955x_gmac_attach 955x_GMAC: qca955x_set_gmac_caps Currently in polling mode unit0 mac:0 Registering S17.... qca955x_GMAC: RX TASKLET - Pkts per Intr:200 qca955x_GMAC: Max segments per packet : 1 qca955x_GMAC: Max tx descriptor count : 220 qca955x_GMAC: Max rx descriptor count : 220 qca955x_GMAC: Mac capability flags : 10002A00 955x_GMAC: Serdes PLL is locked value 0x1f038116 athr_gmac_ring_alloc Allocated 3520 at 0x87950000 athr_gmac_ring_alloc Allocated 3520 at 0x87a99000 955x_GMAC: eth1 in SGMII MODE Scorpion -----> S17 PHY ttl zero adding rule #0 ACL is not yet enabled. Enabling... ttl one adding rule #1 UDP checksum 0 adding rule #3 Hello, nat helper module for 1.08! netlink_kernel_create succeeded at tp_rule_nl_prot: [29] ######## S17 SSDK init succeeded! ######## _athrs17_mac0_intf SGMII done athrs17_reg_init:done 955x_SGMII::athr_gmac_sgmii_setup Done Setting Drop CRC Errors, Pause Frames and Length Error frames Setting PHY... Phy setup Complete ADDRCONF(NETDEV_UP): eth0: link is not ready device eth0.1 entered promiscuous mode device eth0 entered promiscuous mode SET INTF MAC 0:ec-26-ca-f0-0e-c8 SET INTF MAC 1:ec-26-ca-f0-0e-c9 br0: port 1(eth0.1) entering forwarding state Adding ACL rules 2 - wan to lan, dst ip is lan net nf_conntrack_rtsp v0.6.21 loading nf_nat_rtsp v0.6.21 loading adf: module license 'Proprietary' taints kernel. Disabling lock debugging due to kernel taint ath_hal: 0.9.17.1 (AR5416, AR9380, REGOPS_FUNC, WRITE_EEPROM, 11D) ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved ath_dfs: Version 2.0.0 Copyright (c) 2005-2006 Atheros Communications, Inc. All Rights Reserved ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved ath_ahb: 10.1.467 (Atheros/multi-bss) __ath_attach: Set global_scn[0] Enterprise mode: 0x43fc0000 Restoring Cal data from Flash Green-AP : Green-AP : Attached ath_get_caps[5956] rx chainmask mismatch actual 7 sc_chainmak 0 ath_get_caps[5931] tx chainmask mismatch actual 7 sc_chainmak 0 ath_attach_dfs[11935] dfsdomain 1 SC Callback Registration for wifi0 wifi0: Atheros ???: mem=0xb8100000, irq=2 ath_pci: 10.1.467 (Atheros/multi-bss) ath_pci_probe PCI device id is 003c :003c ath_pci 0000:01:00.0: ath DEBUG: sc=0x86ebbe00 ol_ath_pci_configure : num_desired MSI set to 0 Using PCI Legacy Interrupt __ol_ath_attach: ath_attach TODO ol_ath_attach() BMI inited. ol_ath_attach() BMI Get Target Info. ol_ath_attach() TARGET TYPE: 7 Vers 0x4100016c NUM_DEV=1 FWMODE=0x2 FWSUBMODE=0x0 FWBR_BUF 0 ol_ath_attach() configure Target . qc98xx_verify_checksum: flash checksum passed: 0xb25f ol_transfer_bin_file 1688: Download Flash data len 2116 ol_transfer_bin_file 1635: Download Firmware data len 190448 ol_ath_attach() Download FW. ol_ath_attach() HT Create . ol_ath_attach() HIF Claim. ol_ath_attach() BMI Done. ol_ath_attach() WMI attached. wmi_handle 86e30000 +HWT CE_recv_buf_enqueue 457 Populate last entry 512 for CE 5 CE_recv_buf_enqueue 466 CE 5 wi 511 dest_ptr 0x5eb500 nbytes 0 recv_ctxt 0x86c34800 -HWT HTC Service:0x0300 ep:1 TX flow control disabled CE_pkt_dl_len_set CE 4 Pkt download length 42 TXRX: Created pdev 86ebb800 wmi_service_ready_event_rx: WMI UNIFIED SERVICE READY event num_rf_chain : 00000003 ht_cap_info: : 0000085b vht_cap_info : 338001b2 vht_supp_mcs : 0000ffea LARGE_AP enabled. num_peers 144, num_vdevs 16, num_tids 256 idx 0 req 1 num_units 0 num_unit_info 2 unit size 404 actual units 145 chunk 0 len 58580 requested ,ptr 0x6f20000 FIRMWARE:P 145 V 16 T 443 wmi_ready_event_rx: WMI UNIFIED READY event ol_ath_connect_htc() WMI is ready ol_ath_set_host_app_area TODO target uses HTT version 2.1; host uses 2.1 ol_ath_attach() connect HTC. ol_regdmn_start: reg-domain param: regdmn=0, countryName=, wModeSelect=FFFFFFFF, netBand=FFFFFFFF, extendedChanMode=0. ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2) flags 0x2150 ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4) flags 0xa0 ol_regdmn_init_channels: !avail mode 0x1f9001 (0x8) flags 0xc0 ol_regdmn_init_channels: !avail mode 0x1f9001 (0x20) flags 0xd0 ol_regdmn_init_channels: !avail mode 0x1f9001 (0x40) flags 0x150 ol_regdmn_init_channels: !avail mode 0x1f9001 (0x800) flags 0x10080 ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2000) flags 0x20080 ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4000) flags 0x40080 Skipping VHT80 channel 5825 ol_ath_phyerr_attach: called OL Resmgr Init-ed Green-AP : Green-AP : Attached Green-AP : Attached ol_if_dfs_setup: called ol_if_dfs_attach: called; ptr=86f09974, radar_info=87bd7be8 ol_ath_rtt_meas_report_attach: called ol_ath_attach() UMAC attach . ol_if_dfs_configure: called ol_if_dfs_configure: FCC domain ol_if_dfs_disable: called ol_ath_attach: Calling ol_if_dfs_configure __ol_ath_attach: init tx/rx TODO __ol_ath_attach: hard_header_len reservation 58 __ol_ath_attach: dev name wifi1 SC Callback Registration for wifi1 ath_attach_dfs[11935] dfsdomain 1 VAP device ath0 created DES SSID SET=TP-LINK_0EC7 ieee80211_ioctl_siwmode: imr.ifm_active=131712, new mode=3, valid=1 Invoking ACS module for Best channel selection Channel 1 average beacon RSSI 37 noisefloor -107 ieee80211_acs_find_best_11ng_centerchan chan: 1 beacon RSSI + weighted noisefloor: -177 Channel 6 average beacon RSSI 13 noisefloor -106 ieee80211_acs_find_best_11ng_centerchan chan: 6 beacon RSSI + weighted noisefloor: -199 Channel 6 average beacon RSSI 13 noisefloor -106 ieee80211_acs_find_best_11ng_centerchan chan: 6 beacon RSSI + weighted noisefloor: -199 Channel 11 average beacon RSSI 13 noisefloor -107 ieee80211_acs_find_best_11ng_centerchan chan: 11 beacon RSSI + weighted noisefloor: -201 ieee80211_acs_find_best_11ng_centerchan found best 11ng center chan: 11 rssi: -201 athr_gmac_ring_alloc Allocated 3520 at 0x86f07000 athr_gmac_ring_alloc Allocated 3520 at 0x87a36000 955x_GMAC: eth0 in RGMII MODE Scorpion -----> S17 PHY athrs17_reg_init_wan done Setting Drop CRC Errors, Pause Frames and Length Error frames Setting PHY... ADDRCONF(NETDEV_UP): eth1: link is not ready device eth1 entered promiscuous mode device ath0 entered promiscuous mode br1: port 2(ath0) entering forwarding state ieee80211_ioctl_siwmode: imr.ifm_active=1442432, new mode=3, valid=1 br1: port 2(ath0) entering disabled state DEVICE IS DOWN ifname=ath0 DEVICE IS DOWN ifname=ath0 br1: port 2(ath0) entering forwarding state Enet:1 port1 up 955x_GMAC: enet unit:1 is up... eth1 SGMII 1000Mbps full duplex 955x_GMAC: qca955x_soc_gmac_set_mac_duplex 955x_GMAC: qca955x_soc_gmac_set_link Done 955x_GMAC: done cfg2 0x7215 ifctl 0x0 miictrl ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready 955x_GMAC: qca955x_soc_gmac_set_mac_duplex 955x_GMAC: qca955x_soc_gmac_set_link Done ADDRCONF(NETDEV_CHANGE): eth1: link becomes ready br1: port 1(eth1) entering forwarding state eth1: received packet with own address as source address br1: port 2(ath0) entering disabled state br1: port 2(ath0) entering forwarding state isCountryCodeValid: EEPROM regdomain 0x0 ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2) flags 0x2150 ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4) flags 0xa0 ol_regdmn_init_channels: !avail mode 0x1f9001 (0x8) flags 0xc0 ol_regdmn_init_channels: !avail mode 0x1f9001 (0x20) flags 0xd0 ol_regdmn_init_channels: !avail mode 0x1f9001 (0x40) flags 0x150 ol_regdmn_init_channels: !avail mode 0x1f9001 (0x800) flags 0x10080 ol_regdmn_init_channels: !avail mode 0x1f9001 (0x2000) flags 0x20080 ol_regdmn_init_channels: !avail mode 0x1f9001 (0x4000) flags 0x40080 Skipping VHT80 channel 5825 ath_ioctl: SIOC80211IFCREATE CALLED wmi_unified_vdev_create_send: ID = 0 VAP Addr = ec:26:ca:f0:0e:c6: TXRX: Created vdev 86ff1b00 (ec:26:ca:f0:0e:c6) Setting vdev param = 26, value = 147 Setting vdev param = 27, value = 295 Setting vdev param = 28, value = 300 VAP device ath1 created TXRX: ol_txrx_peer_find_add_id: peer 8660b000 ID 401 TXRX: ol_txrx_peer_find_add_id: peer 8660b000 ID 385 eth1: received packet with own address as source address Setting vdev param = f, value = 1 ol_ath_vap_set_param: VAP param unsupported param:80 value:1 ol_ath_vap_set_param: VAP param unsupported param:35 value:0 DES SSID SET=TP-LINK_5G_0EC6 ieee80211_ioctl_siwmode: imr.ifm_active=66176, new mode=3, valid=1 OL vap_stop + wmi_unified_vdev_stop_send OL vap_stop - STOPPED EVENT for vap 0 Setting vdev param = 2a, value = 2 ol_ath_vap_set_param: VAP param is now supported param:62 value:2 OL vap_stop + wmi_unified_vdev_stop_send OL vap_stop - STOPPED EVENT for vap 0 OL vap_stop + wmi_unified_vdev_stop_send OL vap_stop - STOPPED EVENT for vap 0 FWLOG: [29837] WHAL_ERROR_RECV_STOPPCU ( 0x110298a, 0x3 ) FWLOG: [29837] WHAL_ERROR_RESET_PM ( ) Invoking ACS module for Best channel selection Function ieee80211_acs_find_best_11na_centerchan best 5G channel is 161 OL vap_start + OL vap_start - ol_vdev_start_resp_ev ol_ath_vap_join: join operation is only for STA/IBSS mode ol_ath_wmm_update: Setting vdev param = 3, value = 100 Notification to UMAC VAP layer eth1: received packet with own address as source address wmi_unified_vdev_stop_send STOPPED EVENT for vap 0 Setting vdev param = 1a, value = 1 Setting vdev param = 3, value = 100 Setting vdev param = d, value = 1 Setting vdev param = 12, value = 1 Setting vdev param = 1e, value = 1 OL vap_stop + wmi_unified_vdev_stop_send OL vap_stop - STOPPED EVENT for vap 0 OL vap_start + OL vap_start - ol_vdev_start_resp_ev ol_ath_vap_join: join operation is only for STA/IBSS mode ol_ath_wmm_update: Setting vdev param = 3, value = 100 Notification to UMAC VAP layer device ath1 entered promiscuous mode br1: port 3(ath1) entering forwarding state ieee80211_ioctl_siwmode: imr.ifm_active=131738, new mode=3, valid=1 wmi_unified_vdev_stop_send STOPPED EVENT for vap 0 br1: port 3(ath1) entering disabled state ol_ath_vap_set_param: VAP param unsupported param:32 value:0 ol_ath_vap_set_param: VAP param unsupported param:121 value:1 DEVICE IS DOWN ifname=ath1 DEVICE IS DOWN ifname=ath1 ol_ath_vap_set_param: VAP param unsupported param:32 value:0 ol_ath_vap_set_param: VAP param unsupported param:32 value:0 ol_ath_vap_set_param: VAP param unsupported param:17 value:1 OL vap_stop + wmi_unified_vdev_stop_send OL vap_stop - STOPPED EVENT for vap 0 OL vap_start + OL vap_start - ol_vdev_start_resp_ev ol_ath_vap_join: join operation is only for STA/IBSS mode ol_ath_wmm_update: Setting vdev param = 3, value = 100 Notification to UMAC VAP layer br1: port 3(ath1) entering forwarding state FWLOG: [36702] WAL_DBGID_BB_WDOG_TRIGGERED ( 0x8f5e, 0x200008a, 0x0, 0x5 ) eth1: received packet with own address as source address wmi_unified_vdev_stop_send STOPPED EVENT for vap 0 br1: port 3(ath1) entering disabled state ol_ath_vap_set_param: VAP param unsupported param:17 value:1 OL vap_stop + wmi_unified_vdev_stop_send OL vap_stop - STOPPED EVENT for vap 0 OL vap_start + OL vap_start - ol_vdev_start_resp_ev ol_ath_vap_join: join operation is only for STA/IBSS mode ol_ath_wmm_update: Setting vdev param = 3, value = 100 Notification to UMAC VAP layer br1: port 3(ath1) entering forwarding state fuse init (API version 7.12) usbcore: registered new interface driver usbfs usbcore: registered new interface driver hub usbcore: registered new device driver usb ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver Port Status 1c000004 ath-ehci ath-ehci.0: ATH EHCI ath-ehci ath-ehci.0: new USB bus registered, assigned bus number 1 ehci_reset Intialize USB CONTROLLER in host mode: 13 ehci_reset Port Status 1c000000 ath-ehci ath-ehci.0: irq 3, io mem 0x1b000000 ehci_reset Intialize USB CONTROLLER in host mode: 13 ehci_reset Port Status 1c000000 ath-ehci ath-ehci.0: USB 2.0 started, EHCI 1.00 usb usb1: configuration #1 chosen from 1 choice hub 1-0:1.0: USB hub found hub 1-0:1.0: 1 port detected Port Status 1c000000 ath-ehci1 ath-ehci1.1: ATH EHCI ath-ehci1 ath-ehci1.1: new USB bus registered, assigned bus number 2 ehci_reset Intialize USB CONTROLLER in host mode: 13 ehci_reset Port Status 1c000000 ath-ehci1 ath-ehci1.1: irq 3, io mem 0x1b400000 ehci_reset Intialize USB CONTROLLER in host mode: 13 ehci_reset Port Status 1c000000 ath-ehci1 ath-ehci1.1: USB 2.0 started, EHCI 1.00 usb usb2: configuration #1 chosen from 1 choice hub 2-0:1.0: USB hub found hub 2-0:1.0: 1 port detected SCSI subsystem initialized Initializing USB Mass Storage driver... usbcore: registered new interface driver usb-storage USB Mass Storage support registered. GPL NetUSB up! kc 86 : run_telnetDBGDServer start kc 223 : init_DebugD end INFO1758: NetUSB 1.184, 0002061F : May 7 2012 10:35:23 INFO175A: AUTH ISOC INFO175B: usbcore: registered new interface driver KC NetUSB General Driver INFO0076: init proc : PAGE_SIZE 4096 INFO17B4: Check mac address INFO162C: infomap 8678c220 INFO162F: sleep to wait br0 to wake up INFO02D0: use dev Name br0 INFO1638: sleep to wait br0 end. INFO1651: UDP_BROAD 7437 tcpPort:625868800 INFO02D0: use dev Name br0 INFO1538: tcpConnector() started... INFO1415: Bind to br0

ap135> printenv
bootargs=console=ttyS0,115200 root=31:02 rootfstype=jffs2 init=/sbin/init mtdparts=ath-nor0:256k(u-boot),64k(u-boot-env),6336k(rootfs),1408k(uImage),64k(mib0),64k(ART)
bootcmd=bootm 0x9f020000
bootdelay=1
baudrate=115200
ethaddr=0xba:0xbe:0xfa:0xce:0x08:0x41
ipaddr=192.168.1.111
serverip=192.168.1.100
dir=
lu=tftp 0x80060000 ${dir}u-boot.bin&&erase 0x9f000000 +$filesize&&cp.b $fileaddr 0x9f000000 $filesize
lf=tftp 0x80060000 ${dir}ap135${bc}-jffs2&&erase 0x9f050000 +0x630000&&cp.b $fileaddr 0x9f050000 $filesize
lk=tftp 0x80060000 ${dir}vmlinux${bc}.lzma.uImage&&erase 0x9f680000 +$filesize&&cp.b $fileaddr 0x9f680000 $filesize
stdin=serial
stdout=serial
stderr=serial
ethact=eth0

Environment size: 686/65532 bytes

U-Boot 1.1.4 (Jan 26 2013 - 13:35:40) ap135 - Scorpion 1.0DRAM: sri Scorpion 1.0 ath_ddr_initial_config(178): (32bit) ddr2 init tap = 0x00000003 Tap (low, high) = (0x4, 0x1f) Tap values = (0x11, 0x11, 0x11, 0x11) 128 MB Flash Manuf Id 0x1c, DeviceId0 0x30, DeviceId1 0x17 flash size 8MB, sector count = 128 Flash: 8 MB Using default environment *** Warning *** : PCIe WLAN Module not found !!! In: serial Out: serial Err: serial Net: ath_gmac_enet_initialize... athrs_sgmii_res_cal: cal value = 0xe No valid address in Flash. Using fixed address No valid address in Flash. Using fixed address ath_gmac_enet_initialize: reset mask:c02200 Scorpion ----> S17 PHY * Vlan config... TEST: FINAL REG VAL after TX Calibration - 0x46000000 TEST: FINAL XMII VAL after RX Calibration - 0x56000000 TEST: FINAL ETH_CFG VAL after RX Calibration - 0x00028001 athrs17_reg_init: complete : cfg1 0x80000000 cfg2 0x7335 eth0: ba:be:fa:ce:08:41 eth0 up athrs17_reg_init_wan done SGMII in forced mode athr_gmac_sgmii_setup SGMII done : cfg1 0x800c0000 cfg2 0x7214 eth1: ba:be:fa:ce:08:41 eth1 up eth0, eth1 Setting 0x18116290 to 0x50a1214f Autobooting in 1 seconds ## Booting image at 9f020000 ... Uncompressing Kernel Image ... OK Starting kernel ... [ 0.000000] Linux version 3.10.13 (nosferatu@work.g0x.ru) (gcc version 4.6.4 (OpenWrt/Linaro GCC 4.6-2013.05 r38284) ) #1 3 [ 0.000000] bootconsole [early0] enabled [ 0.000000] CPU revision is: 00019750 (MIPS 74Kc) [ 0.000000] SoC: Qualcomm Atheros QCA9558 rev 0 [ 0.000000] Clocks: CPU:720.000MHz, DDR:600.000MHz, AHB:200.000MHz, Ref:40.000MHz [ 0.000000] Determined physical RAM map: [ 0.000000] memory: 08000000 @ 00000000 (usable) [ 0.000000] Initrd not found or empty - disabling initrd [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x00000000-0x07ffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x00000000-0x07ffffff] [ 0.000000] Primary instruction cache 64kB, VIPT, 4-way, linesize 32 bytes. [ 0.000000] Primary data cache 32kB, 4-way, VIPT, cache aliases, linesize 32 bytes [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pages: 32512 [ 0.000000] Kernel command line: board=ARCHER-C7 console=ttyS0,115200 rootfstype=squashfs,jffs2 noinitrd [ 0.000000] PID hash table entries: 512 (order: -1, 2048 bytes) [ 0.000000] Dentry cache hash table entries: 16384 (order: 4, 65536 bytes) [ 0.000000] Inode-cache hash table entries: 8192 (order: 3, 32768 bytes) [ 0.000000] Writing ErrCtl register=00000000 [ 0.000000] Readback ErrCtl register=00000000 [ 0.000000] Memory: 126312k/131072k available (2196k kernel code, 4760k reserved, 588k data, 220k init, 0k highmem) [ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 [ 0.000000] NR_IRQS:51 [ 0.000000] Calibrating delay loop... 358.80 BogoMIPS (lpj=1794048) [ 0.060000] pid_max: default: 32768 minimum: 301 [ 0.060000] Mount-cache hash table entries: 512 [ 0.070000] NET: Registered protocol family 16 [ 0.070000] MIPS: machine is TP-LINK Archer C7 [ 0.080000] ar724x-pci ar724x-pci.0: PCIe link is down [ 0.080000] registering PCI controller with io_map_base unset [ 0.090000] registering PCI controller with io_map_base unset [ 0.500000] bio: create slab <bio-0> at 0 [ 0.500000] PCI host bridge to bus 0000:00 [ 0.510000] pci_bus 0000:00: root bus resource [mem 0x10000000-0x11ffffff] [ 0.510000] pci_bus 0000:00: root bus resource [io 0x0000] [ 0.520000] pci_bus 0000:00: No busn resource found for root bus, will use [bus 00-ff] [ 0.520000] PCI host bridge to bus 0000:01 [ 0.530000] pci_bus 0000:01: root bus resource [mem 0x12000000-0x13ffffff] [ 0.530000] pci_bus 0000:01: root bus resource [io 0x0001] [ 0.540000] pci_bus 0000:01: No busn resource found for root bus, will use [bus 01-ff] [ 0.540000] pci 0000:01:00.0: BAR 0: assigned [mem 0x12000000-0x121fffff 64bit] [ 0.550000] pci 0000:01:00.0: BAR 6: assigned [mem 0x12200000-0x1220ffff pref] [ 0.550000] pci 0000:01:00.0: using irq 41 for pin 1 [ 0.560000] Switching to clocksource MIPS [ 0.560000] NET: Registered protocol family 2 [ 0.570000] TCP established hash table entries: 1024 (order: 1, 8192 bytes) [ 0.570000] TCP bind hash table entries: 1024 (order: 0, 4096 bytes) [ 0.570000] TCP: Hash tables configured (established 1024 bind 1024) [ 0.580000] TCP: reno registered [ 0.580000] UDP hash table entries: 256 (order: 0, 4096 bytes) [ 0.590000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) [ 0.600000] NET: Registered protocol family 1 [ 0.610000] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 0.620000] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 0.630000] msgmni has been set to 246 [ 0.630000] io scheduler noop registered [ 0.630000] io scheduler deadline registered (default) [ 0.640000] Serial: 8250/16550 driver, 1 ports, IRQ sharing disabled [ 0.670000] serial8250.0: ttyS0 at MMIO 0x18020000 (irq = 11) is a 16550A [ 0.670000] console [ttyS0] enabled, bootconsole disabled [ 0.670000] console [ttyS0] enabled, bootconsole disabled [ 0.690000] ath79-spi ath79-spi: master is unqueued, this is deprecated [ 0.690000] m25p80 spi0.0: found en25q64, expected m25p80 [ 0.700000] m25p80 spi0.0: en25q64 (8192 Kbytes) [ 0.700000] 5 tp-link partitions found on MTD device spi0.0 [ 0.710000] Creating 5 MTD partitions on "spi0.0": [ 0.710000] 0x000000000000-0x000000020000 : "u-boot" [ 0.720000] 0x000000020000-0x000000118d48 : "kernel" [ 0.730000] mtd: partition "kernel" must either start or end on erase block boundary or be smaller than an erase block -- y [ 0.740000] 0x000000118d48-0x0000007f0000 : "rootfs" [ 0.740000] mtd: partition "rootfs" must either start or end on erase block boundary or be smaller than an erase block -- y [ 0.760000] mtd: partition "rootfs" set to be root filesystem [ 0.760000] 1 squashfs-split partitions found on MTD device rootfs [ 0.770000] 0x000000330000-0x0000007f0000 : "rootfs_data" [ 0.780000] 0x0000007f0000-0x000000800000 : "art" [ 0.780000] 0x000000020000-0x0000007f0000 : "firmware" [ 0.820000] switch0: Atheros AR8327 rev. 4 switch registered on ag71xx-mdio.0 [ 2.080000] libphy: ag71xx_mdio: probed [ 2.080000] eth0: Atheros AG71xx at 0xb9000000, irq 4, mode:RGMII [ 2.640000] ag71xx ag71xx.0 eth0: connected to PHY at ag71xx-mdio.0:00 [uid=004dd034, driver=Atheros AR8216/AR8236/AR8316] [ 2.650000] eth1: Atheros AG71xx at 0xba000000, irq 5, mode:SGMII [ 3.210000] TCP: cubic registered [ 3.210000] NET: Registered protocol family 17 [ 3.220000] 8021q: 802.1Q VLAN Support v1.8 [ 3.230000] VFS: Mounted root (squashfs filesystem) readonly on device 31:2. [ 3.230000] Freeing unused kernel memory: 220K (80319000 - 80350000) Console is alive procd: Console is alive - watchdog - procd: - watchdog - [ 5.390000] usbcore: registered new interface driver usbfs [ 5.400000] usbcore: registered new interface driver hub [ 5.400000] usbcore: registered new device driver usb [ 5.410000] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 5.420000] ehci-platform: EHCI generic platform driver [ 5.420000] ehci-platform ehci-platform.0: EHCI Host Controller [ 5.430000] ehci-platform ehci-platform.0: new USB bus registered, assigned bus number 1 [ 5.440000] ehci-platform ehci-platform.0: TX-TX IDP fix enabled [ 5.440000] ehci-platform ehci-platform.0: irq 48, io mem 0x1b000000 [ 5.470000] ehci-platform ehci-platform.0: USB 2.0 started, EHCI 1.00 [ 5.470000] hub 1-0:1.0: USB hub found [ 5.480000] hub 1-0:1.0: 1 port detected [ 5.480000] ehci-platform ehci-platform.1: EHCI Host Controller [ 5.490000] ehci-platform ehci-platform.1: new USB bus registered, assigned bus number 2 [ 5.500000] ehci-platform ehci-platform.1: TX-TX IDP fix enabled [ 5.500000] ehci-platform ehci-platform.1: irq 49, io mem 0x1b400000 [ 5.530000] ehci-platform ehci-platform.1: USB 2.0 started, EHCI 1.00 [ 5.530000] hub 2-0:1.0: USB hub found [ 5.540000] hub 2-0:1.0: 1 port detected kmod: ran 19 iterations - preinit - procd: - preinit - Press the [f] key and hit [enter] to enter failsafe mode [ 7.660000] eth0: link up (1000Mbps/Full duplex) mount_root: jffs2 is not ready - marker found [ 8.820000] eth0: link down - early - procd: - early - - watchdog - procd: - watchdog - - init - procd: - init - Please press Enter to activate this console. [ 10.340000] NET: Registered protocol family 10 [ 10.350000] nf_conntrack version 0.5.0 (1977 buckets, 7908 max) [ 10.360000] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 10.380000] Loading modules backported from Linux version master-2013-06-27-0-gdcfa6d5 [ 10.390000] Backport generated by backports.git backports-20130617-4-ge3220f5 [ 10.400000] ip_tables: (C) 2000-2006 Netfilter Core Team [ 10.430000] xt_time: kernel timezone is -0000 [ 10.460000] cfg80211: Calling CRDA to update world regulatory domain [ 10.460000] cfg80211: World regulatory domain updated: [ 10.470000] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp) [ 10.480000] cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) [ 10.480000] cfg80211: (2457000 KHz - 2482000 KHz @ 20000 KHz), (300 mBi, 2000 mBm) [ 10.490000] cfg80211: (2474000 KHz - 2494000 KHz @ 20000 KHz), (300 mBi, 2000 mBm) [ 10.500000] cfg80211: (5170000 KHz - 5250000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) [ 10.510000] cfg80211: (5735000 KHz - 5835000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) [ 10.540000] PPP generic driver version 2.4.2 [ 10.550000] NET: Registered protocol family 24 [ 10.600000] cfg80211: Calling CRDA for country: US [ 10.600000] cfg80211: Regulatory domain changed to country: US [ 10.610000] cfg80211: (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp) [ 10.620000] cfg80211: (2402000 KHz - 2472000 KHz @ 40000 KHz), (300 mBi, 2700 mBm) [ 10.630000] cfg80211: (5170000 KHz - 5250000 KHz @ 40000 KHz), (300 mBi, 1700 mBm) [ 10.630000] cfg80211: (5250000 KHz - 5330000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) [ 10.640000] cfg80211: (5490000 KHz - 5600000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) [ 10.650000] cfg80211: (5650000 KHz - 5710000 KHz @ 40000 KHz), (300 mBi, 2000 mBm) [ 10.660000] cfg80211: (5735000 KHz - 5835000 KHz @ 40000 KHz), (300 mBi, 3000 mBm) [ 10.670000] ieee80211 phy0: Atheros AR9550 Rev:0 mem=0xb8100000, irq=47 [ 15.540000] eth1: link up (1000Mbps/Full duplex) [ 15.540000] device eth1 entered promiscuous mode [ 15.570000] br-lan: port 1(eth1) entered forwarding state [ 15.570000] br-lan: port 1(eth1) entered forwarding state [ 15.600000] IPv6: ADDRCONF(NETDEV_CHANGE): eth1: link becomes ready [ 15.610000] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready [ 16.790000] eth0: link up (1000Mbps/Full duplex) [ 16.810000] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready [ 17.570000] br-lan: port 1(eth1) entered forwarding state [ 20.600000] jffs2_scan_eraseblock(): End of filesystem marker found at 0x0 [ 20.610000] jffs2_build_filesystem(): unlocking the mtd device... done. [ 20.610000] jffs2_build_filesystem(): erasing all blocks after the end marker... done. [ 40.270000] jffs2: notice: (946) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked,. procd: - init complete - BusyBox v1.19.4 (2013-10-02 19:00:12 MSK) built-in shell (ash) Enter 'help' for a list of built-in commands. _______ ________ __ | |.-----.-----.-----.| | | |.----.| |_ | - || _ | -__| || | | || _|| _| |_______|| __|_____|__|__||________||__| |____| |__| W I R E L E S S F R E E D O M ----------------------------------------------------- BARRIER BREAKER (Bleeding Edge, r38284) ----------------------------------------------------- * 1/2 oz Galliano Pour all ingredients into * 4 oz cold Coffee an irish coffee mug filled * 1 1/2 oz Dark Rum with crushed ice. Stir. * 2 tsp. Creme de Cacao ----------------------------------------------------- root@OpenWrt:/#

OEM GPL Source (v1): http://www.tp-link.com/resources/gpl/Archer_C7_1.0.tar.gz
GPL source (v2): http://www.tp-link.com/resources/gpl/ArcherC7v2_un_gpl.zip

MIPS, MIPS32, 74Kc, QCA9558, QCA9563, QCA9880, 8Flash, 16flash, 128ram, 5Port, GigabitEthernet, vlan, 802.11bgn, 802.11ac, simultan, internalantenna, detachableantenna, 2ant, 3ant, 6ant, 2NIC, 2WNIC, ath10k, ap135, 1usb, 2usb, usb2.0, MiniPCIexpress, serial, jtag, u-boot, 12v powered

mips mips32 74kc qca9558 qca9563 qca9880 8Flash 16flash 128ram 5port gigabitethernet vlan 802.11bgn 802.11ac simultan internalantenna detachableantenna 2ant 3ant 6ant 2nic 2wnic ath10k ap135 1usb 2usb usb2.0 minipciexpress serial jtag u-boot 12v powered

Last modified: 2024/10/12 15:51
by noki

TP-Link Archer C5 AC1200 / TP-Link Archer C7 AC1750 / TP-Link TL-WDR7500

Supported Versions

Hardware Highlights

NAT performance

Archer C5 1.20

Archer C7 2.0

USB Support

Installation

Quick Start Guide

Archer C5

Archer C7

All C7 Versions

Installation of TP-Link Archer C7 V1.X

Installation of TP-Link Archer C7 V2

1.Download appropriate modified version of DDWRT that passes the TP-Link verification:

2.Flash TP-Link reverted FW:

3.Flash OpenWrt FW:

Installation and upgrade of TP-Link Archer C7 V3

Installation and upgrade of TP-Link Archer C7 V4

Installation of TP-Link Archer C7 V5 via webUI

User confirmations for webUI method

Installation of TP-Link Archer C7 V5 via TFTP

Archer C7R

Installation of TP-Link WDR7500 V3 via TTL and TFTP

5G Wifi Problems / 5GHz network controller not identified

Entering Failsafe Mode on Archer C5 or Archer C7

Return to Factory Firmware

TFTP Recovery (De-Bricking)

Recovery using serial connection

Hardware

Info

Flash Layout

Flash backup

Power Consumption

Benchmarks

Configuration

Port Map

VLAN Tagging

Tagging "WAN" Interface for ISP Connectivity

Photos

WDR7500 v2

WDR7500 v3

Serial

Archer C5 v2

WDR7500 v2 / Archer C7 v2

WDR7500 v3

Archer C7 v4.0 (US)

Archer C7 v5.0 (EU)

JTAG

Bootlogs

OEM bootlog

WDR7500 v3 2015-04-23

U-Boot environment

OpenWrt bootlog

Tags